Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: goQb/vMepqIX5FLK9lqxNxNEGHmeKqNg8hU5gIIZfF4=
Subject key identifier: 29:78:A1:2E:0F:89:4C:92:CB:80:1E:14:93:C4:80:05:80:BB:13:F5
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 019874508BEB3F4624E2BEC29B96A93CCDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0C78
Signing time: Mon 04 Aug 2025 09:01:32 +0000
Manifest this update: Mon 04 Aug 2025 09:01:32 +0000
Manifest next update: Tue 05 Aug 2025 09:01:32 +0000
Files and hashes: 1: 5hJAv1vo3oOPqWjQpBgMDKDCfMU.roa (hash: NHMZ+Lo+WMMXDw4UrqXBzj/Re+R0/j7Wcu84BebYuQw=)
2: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: UFXhw/4+zLrFN5KeCUUjaLUxVhc2cFxWt32mE26VTCk=)
3: exkTmhIrPHXpMpwbJ39TJjbGGQU.roa (hash: O4LImE4gF0VDKL+p9YeHfP2uSXH0M3XtEyfG3rkFcvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:8b:eb:3f:46:24:e2:be:c2:9b:96:a9:3c:cd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Aug 4 09:01:32 2025 GMT
Not After : Aug 5 09:01:32 2025 GMT
Subject: CN=2978a12e0f894c92cb801e1493c4800580bb13f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:1e:fa:4f:ce:71:f0:c5:2a:7f:05:ca:da:
2b:85:c2:b6:5a:e5:56:6c:04:11:d2:52:01:36:a6:
d7:07:2a:e2:49:4b:ee:ee:01:65:b9:37:ec:ce:6c:
75:27:79:4c:ad:d4:91:89:2e:d1:50:24:ba:a8:54:
78:13:c2:09:91:d8:22:1b:d7:8d:9a:fd:cc:96:c1:
2b:ff:96:af:b9:b2:23:5b:4a:f2:c4:f6:79:eb:15:
3e:90:d2:ed:66:4b:db:70:0b:ee:fa:96:f2:1a:a1:
70:65:02:8d:d3:e8:b0:7f:99:c6:8c:8f:e5:9f:c9:
4f:82:e1:fd:3e:f9:0f:f7:8b:b8:d9:ec:62:f6:8a:
f5:46:91:82:2a:48:04:87:fd:77:3f:32:2f:e3:b6:
3f:5c:28:aa:94:8b:25:5a:6f:6a:36:eb:df:cc:66:
87:2a:0f:f7:a0:9a:52:17:ee:16:b1:2b:d3:03:83:
da:ce:56:34:0b:b3:8c:76:80:4d:6b:d7:f7:41:47:
57:11:53:a9:f1:9c:f5:e5:9a:cc:24:7c:d1:03:91:
a5:5c:79:0e:b6:0e:89:f7:47:68:e0:3d:12:3e:5f:
64:41:2d:5d:26:82:9d:2d:a7:7f:75:fa:e8:ba:d2:
d0:22:79:5e:3d:ab:19:1f:ea:a2:c3:7f:60:a2:53:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:78:A1:2E:0F:89:4C:92:CB:80:1E:14:93:C4:80:05:80:BB:13:F5
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9a:b4:45:b6:ad:52:e2:01:54:75:f1:5e:f0:c7:41:1e:af:
c4:ff:48:82:74:69:9b:d5:42:0d:1a:d1:c0:50:a3:49:71:02:
fb:97:7c:7c:5d:61:bf:a7:98:54:b5:49:6d:8c:84:d3:77:7e:
a6:f5:91:45:8d:5b:10:e6:4a:02:70:3c:b2:aa:e7:0e:58:83:
2d:77:f8:fd:62:2d:da:5a:21:16:12:d2:51:cb:55:8f:fb:c3:
07:b1:77:7c:2e:81:93:c9:b6:d9:c0:cf:88:53:28:9b:90:1e:
6f:40:1a:64:54:cd:86:35:cf:9b:28:1a:95:71:4b:c8:f4:6e:
c1:a5:58:46:f2:37:81:06:a0:96:59:fa:89:93:55:18:d9:7d:
c1:6c:d9:f7:06:ce:49:78:41:27:f2:dd:ce:af:e7:74:11:a1:
5a:ee:f3:2a:72:cc:d9:8f:4b:1a:e1:9e:9c:35:ce:91:9e:f7:
02:bd:0d:7a:45:69:08:c2:78:15:ed:08:92:0f:57:7a:76:4c:
f7:1c:44:cb:ae:53:db:1c:12:15:6b:59:ca:19:f0:0b:a8:4f:
ae:87:0c:c0:b3:84:90:db:7d:29:4c:5a:14:3c:77:86:39:ea:
ef:5f:65:64:52:6b:d7:50:5b:dd:65:d1:41:71:00:12:0c:8a:
2f:d0:a9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:51 2025 by rpki-client